Networks

Ask something
Discussion Locked

Server Access Problem

0 helpful
5 replies

by robotech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I recently changed my NT4.0 network to a Windows 2003 Network.
We have 6 remote offices. Five are conencted by frame relay, and one by VPN.
Once we upgraded to Windows 2003 Server from NT4.0, the office connected via VPN was no longer able to talk to the DNS/WINS server (all servers are at the main office). They can ping any server on the network except the DNS/WINS server.
When I try to use the DNS/WINS server to ping a computer on the remote network conencted via VPN it says: "Negotiating IP Security".
I can't figure it out because there are no log messages in the VPN router or the server.

HEEEEEEEEEEEEEEEEEEEEEEEELP!!!!!!!!!!
In the office

5 replies

by 5jgibbs

Make sure your default gateway is correct, also make sure your DNS address is correct.. config a computer statically, and try that. Remember to disable any software firewall when testing. Also remember, that windows 2003 server has added security.

by bfilmfan

I would say that is an IPSEC issue most likely or a firewall as 5 pointed out. I would advise overviewing this article:

http://www.serverwatch.com/tutorials/article.php/3109971

Are the clients at the remote site NT, WIN 2K or XP? If they are NT, you should check that the DNS server isn't trying to send all traffic as encrypted. This will only work with WIN 2K and XP.

by robotech

I had set some IPSec policies under RRAS, but then I disabled RRAS. It was only after I checked the IP Security Policy Management snap-in under the MMC I realised that they were still active. I guess you could say I figured it out on my own, but your answer came the closest, so I'll give you the points.

by jtakiwi

Check the firewall. Windows server 2003 uses very large DNS packets, larger than the default size a cisco pix (and I suspect other) firewalls normally allows. Change the dns packet size setting in the firewall to account for this.

This discussion is closed to new replies.